Introduction

State motor vehicle agencies collected at least $282 million selling driver data to private companies in fiscal year 2024, as Part 1 of this series reported. That figure, however, represents only the regulated portion of the U.S. license plate data economy. A parallel and substantially larger ecosystem of private surveillance networks, smart-billboard analytics platforms and connected-vehicle camera systems captures, stores and monetizes driver information without ever purchasing a record from a DMV.

Because these systems source their data from public photography rather than from state motor vehicle records, they fall outside the 1994 Driver’s Privacy Protection Act. The Fourth Amendment, which restricts government surveillance, does not apply to private actors. The result is a multi-billion-dollar surveillance economy that operates largely without statutory constraint.

Why the DPPA Does Not Reach These Systems

The Driver’s Privacy Protection Act regulates the disclosure of “personal information” obtained by state agencies in connection with motor vehicle records. The law’s scope ends at the DMV. A license plate photographed in a parking lot or on a public highway is, under prevailing legal doctrine, an image taken in a public place where courts have generally held there is no reasonable expectation of privacy.

In simple terms: if a private company never asks the DMV for data, the DPPA does not apply. And because the company is not a government actor, the Fourth Amendment does not apply either. The two principal federal privacy guardrails for driver data both miss this market.

The Four Parallel Systems

Four distinct categories of private data collection now operate alongside the DMV-fed market documented in Part 1.

System Type	Operator(s)	Scale / Footprint	Buyers / Users
Mobile ALPR (private)	Digital Recognition Network (DRN); Motorola / Vigilant	20B+ historical plate scans; 600+ camera-equipped repo vehicles; 1,000+ DRN accounts	Auto lenders, insurers, repo agents, PIs, law enforcement
Fixed ALPR (public-private)	Flock Safety; Motorola Solutions	5,000+ law enforcement agencies; 4,500+ communities; 1,000+ businesses; 76,000+ cameras mapped by DeFlock	Local police, federal agencies, HOAs, retailers
Smart billboard analytics	Outfront, Lamar, Clear Channel; INRIX; Synaps Labs	$7.5B US OOH ad market; vehicle make/model/year ID at 600-foot range	Brand advertisers, retailers, automakers
Vehicle-mounted cameras	Tesla; other connected-car OEMs	Multiple cameras per vehicle; millions of vehicles on the road	Manufacturer AI training; third parties

1. Mobile Plate Scanning: Digital Recognition Network

Digital Recognition Network, headquartered in Fort Worth, Texas, operates what court filings and trade press describe as the largest private license plate database in the United States. According to a 2021 California class action complaint, DRN has amassed more than 20 billion historical plate scans, with company marketing materials cited in litigation claiming an average of more than 70 separate sightings for every registered vehicle in the country.

The data is collected by a fleet of unmarked vehicles, most operated by repossession contractors, equipped with DRN’s $15,000 ReaperHD four-camera systems. The cameras passively scan every plate the vehicle passes, recording the plate number, a photograph, a GPS coordinate and a timestamp.

Access is sold by query. A 2019 contract obtained by Vice Motherboard set per-lookup pricing at approximately $20, with an additional $70 service that issues real-time alerts when a flagged plate is scanned anywhere on the network. DRN’s sister company, Vigilant Solutions — acquired by Motorola Solutions in 2019 — sells comparable technology to law enforcement.

2. The Fixed-Camera Network: Flock Safety

Atlanta-based Flock Safety operates the largest stationary ALPR network in the country. The company, valued at approximately $7.5 billion and backed by roughly $700 million in venture capital, holds contracts with more than 5,000 law enforcement agencies, 4,500 communities and 1,000 businesses. The activist-run mapping project DeFlock.me has crowdsourced the locations of more than 76,000 individual Flock cameras nationwide.

NPR reported in February 2026 that at least 30 localities had deactivated or canceled their Flock contracts since the start of 2025, including Flagstaff, Cambridge, Eugene, Santa Cruz, Mountain View, Austin, Denver and Sedona. California Attorney General Rob Bonta sued the city of El Cajon over Flock-facilitated data sharing with out-of-state agencies. A federal class action filed April 3, 2026 in California alleges that Flock’s network violated state privacy law by enabling the tracking of millions of Californians’ daily movements.

In October 2025, the American Civil Liberties Union reported that Flock had announced plans to integrate its system with commercial data brokers offering “people lookup” services — a move the organization said contradicts the company’s longstanding position that license plates are not personally identifiable. The Electronic Frontier Foundation documented in late 2025 a Texas case in which an officer searched 83,345 cameras across nearly the entire country in connection with a woman’s self-managed abortion.

3. Smart Billboards and the Out-of-Home Advertising Economy

The U.S. out-of-home advertising industry — billboards, transit posters and digital street signage — accounts for roughly $7.5 billion of the $185 billion annual U.S. advertising market. Modern digital billboards do not, in most cases, purchase DMV data. They derive analytics from three distinct sources:

• Roadside cameras with vehicle recognition. Startups such as Synaps Labs install cameras roughly 600 to 650 feet ahead of a digital billboard. The cameras identify make, model and year of approaching vehicles by matching them against libraries of approximately 2,000 reference images per supported vehicle configuration.
• Traffic and mobility analytics. Companies including INRIX license aggregated vehicle-volume, speed and origin-destination data to outdoor advertisers, enabling impression measurement and dynamic creative based on traffic conditions.
• Mobile device retargeting. Outdoor advertisers increasingly link billboard exposure to smartphone advertising IDs collected through partner apps that share location data at roughly 15-second intervals.

In simple terms: the billboard industry has built an audience-measurement system that infers who you are from what you drive and what your phone is doing — and it does so without ever buying a record from the DMV.

4. Vehicle-Mounted Cameras: The Tesla Question

Tesla operates the largest fleet of camera-equipped consumer vehicles in the United States. Each Tesla is equipped with multiple external cameras that continuously process the vehicle’s surroundings — including the license plates, vehicles, pedestrians and storefronts in proximity to the car.

Tesla’s public privacy policy states that camera processing occurs on-vehicle by default and that camera recordings are not associated with the owner’s account unless a serious safety event occurs. Independent researchers have raised questions about the practical limits of those safeguards. A 2023 Reuters investigation reported that Tesla employees had circulated camera footage of customers and bystanders captured by vehicle cameras. The Mozilla Foundation’s 2023 review of connected-vehicle privacy concluded that modern cars are, collectively, “a privacy nightmare.”

Tesla is not unique. General Motors, Ford, Toyota, Nissan, Hyundai and other manufacturers operate connected-vehicle data programs of varying scope, as documented in Part 5 of this series.

Documented Impact

The combined effect of these systems is a near-comprehensive ability to reconstruct the movements of any U.S. driver without recourse to government records. Documented downstream harms have included:

• Use of Flock’s national network by local officers acting on behalf of federal immigration enforcement and reproductive-healthcare investigations.
• Use of DRN’s network by private investigators to obtain years of location history for a consenting subject for the cost of a single query, per Motherboard’s 2019 reporting.
• Internal circulation of vehicle-camera footage by Tesla employees, as reported by Reuters in April 2023.
• Out-of-state and federal access to local ALPR data that municipal officials in California, North Carolina and elsewhere have said exceeded the scope of their authorizing agreements.

Analysis: A Regulatory Gap, Not a Regulatory Failure

The DPPA was drafted in 1994 to address a specific harm — a stalker obtaining a victim’s home address from a state agency. It performs that narrow function reasonably well. It was not designed to address, and does not address, the photographic capture of plates in public space, the aggregation of those captures into national location databases, or the resale of inferred location histories to commercial buyers.

Federal privacy law constrains the smallest segment of the driver-data market (the DMV pipeline) while leaving the largest segments substantively unregulated at the federal level.

Conclusion

The $282 million in disclosed DMV driver-data sales is the smaller and more visible portion of a far larger driver-surveillance economy. Private mobile and fixed-camera networks, smart-billboard analytics platforms and connected-vehicle data programs together build a more detailed, more current and far less constrained record of American driving behavior than any state agency produces.

Key Takeaways

• The DPPA covers only data obtained from state motor vehicle records; it does not reach license plates photographed in public.
• Digital Recognition Network operates a database of more than 20 billion historical plate scans, accessible for as little as $20 per query.
• Flock Safety operates 76,000+ mapped cameras across more than 5,000 law enforcement agencies; at least 30 cities canceled contracts in the past 15 months.
• The U.S. out-of-home advertising industry uses roadside cameras and partner mobile data to target ads by vehicle make, model and inferred demographic — without DMV input.
• Tesla and other connected-car manufacturers capture extensive video of surrounding vehicles, plates and pedestrians; owners can opt out, bystanders cannot.
• Major class actions are pending against DRN (California), Flock (California) and CARFAX (federal).

Frequently Asked Questions

How do private companies track license plates without buying DMV data?

Private camera networks photograph license plates in public space, where courts have generally held there is no reasonable expectation of privacy. The data is sourced from cameras rather than from state motor vehicle records, placing it outside the scope of the federal Driver’s Privacy Protection Act (DPPA).

What is Digital Recognition Network (DRN)?

DRN is a Fort Worth-based company that operates the largest private license plate database in the United States. Court filings indicate it holds more than 20 billion historical plate scans, collected primarily by a fleet of repo vehicles equipped with DRN’s $15,000 ReaperHD camera systems.

How does Flock Safety’s camera network work?

Flock operates more than 76,000 pole-mounted cameras across 5,000+ law enforcement agencies, 4,500+ communities and 1,000+ businesses. Cameras record every passing plate and feed data into a national network that participating agencies can query.

Do Tesla vehicles capture other drivers’ license plates?

Yes. Tesla vehicles use multiple external cameras to continuously process their surroundings, including license plates and faces. Owners can opt out of fleet learning; bystanders cannot.

Can smart billboards identify the cars driving past them?

Yes. Companies such as Synaps Labs install cameras ahead of digital billboards that identify make, model and year of approaching vehicles, then trigger tailored advertisements.

Why doesn’t the DPPA cover private ALPR networks?

The Driver’s Privacy Protection Act only governs disclosure of personal information obtained from state motor vehicle records. Private ALPR networks photograph plates in public space rather than purchasing DMV records.

Related Coverage from NexfinityNews

• State DMVs Collected at Least $282 Million From Driver-Data Sales — Part 1 — the regulated DMV side of the driver-data economy.
• Flock Safety Surveillance Expansion: How Local Cameras Built a National Police Network — Investigation into how Flock’s 76,000+ ALPR cameras became a de facto federal surveillance system.
• Chatrie v. United States: The SCOTUS Case That Could Reshape Digital Surveillance — Inside the Supreme Court geofence warrant case and what it means for location data privacy.
• How a License Plate Becomes a Person — Part 3 — the correlation pipeline that ties surveillance data to named drivers.
• Can You Opt Out? A Driver’s Guide to the Limited Tools That Work in 2026 — Part 4 — practical opt-out tools with direct resource links.
• Are Automakers Now Data Companies? The Recurring Revenue Math — Part 5 — the financial logic driving the surveillance economy.

Sources

• Vice Motherboard, “This Company Built a Private Surveillance Network. We Tracked Someone With It.” 2019.
• ClassAction.org, “Constant Surveillance: Lawsuit Claims DRN’s Collection of License Plate Data Violates Calif. Privacy Law.” August 2021.
• American Civil Liberties Union, “Flock’s Aggressive Expansions Go Far Beyond Simple Driver Surveillance,” October 17, 2025.
• NPR, “Why some cities are canceling Flock license plate reader contracts,” February 17, 2026.
• Electronic Frontier Foundation, Flock Safety investigations, 2025.
• Seattle Times, “Smart billboards are checking you out — and making judgments,” September 27, 2017.
• INRIX, Inc., “Billboard Analytics Solutions” (product literature).
• ACLU, “Tesla Camera Scandal is the Latest Lesson in Dangers of Letting Companies Record You,” April 2023.
• Reuters, Tesla employee camera-sharing investigation, April 2023.
• IEEE Spectrum / Mozilla Foundation, Connected-vehicle privacy reviews, 2023–2024.
• Tesla, Inc., Privacy Notice and Data Privacy Request documentation.
• Driver’s Privacy Protection Act of 1994, 18 U.S.C. § 2721 et seq.